Notifications
Clear all
Topic starter
02/08/2026 11:31 am
TL;DR: AI can speed up vendor risk work, threat detection, application security, and SecOps triage, but the article argues it will augment rather than replace cybersecurity jobs. It cites 3.5 million unfilled cybersecurity roles and a Fortinet study showing 70% of organisations say skills shortages increase risk, underscoring why human oversight still matters.
NHIMG editorial — based on content published by Prophet: Will AI Replace Cybersecurity Jobs?
By the numbers:
- 70% of organizations said the skills shortage and unfilled jobs increases security risks for their organization.
- 80% of organisations report their AI agents have already performed actions beyond their intended scope, including accessing unauthorised systems (39%), inappropriately sharing sensitive data (31%), and revealing access credentials (23%).
Questions worth separating out
Q: How should security teams use AI without turning it into a control dependency?
A: Security teams should use AI for summarisation, correlation, and prioritisation, then keep containment in deterministic controls such as access policy, segmentation, and revocation.
Q: Why does AI not eliminate the need for security analysts?
A: Security work is adversarial, context-heavy, and often ambiguous.
Q: What do organisations get wrong about AI-driven cyber risk?
A: They often assume the main change is autonomous attackers, when the immediate change is faster and more variable abuse of existing identity pathways.
Practitioner guidance
- Define the human decision boundary Map which SecOps and IAM decisions AI may recommend, which it may execute, and which always require human approval.
- Limit AI to assistive workflows first Start with low-risk tasks such as alert summarisation, enrichment, and draft investigation notes.
- Build oversight into identity and access operations If AI is used to support access reviews, policy drafting, or privileged response actions, log every recommendation, approval, and override.
What's in the full article
Prophet's full article covers the practical workforce and tooling discussion this post intentionally leaves at a strategic level:
- How AI is framed across vendor risk management, threat detection, application security, and SecOps use cases
- The article's argument for hybrid teams and why routine analysis may shift faster than strategic security work
- The discussion of human intuition, explainability, and why current LLMs still struggle in adversarial environments
- Prophet's view of new career paths such as AI security specialists
👉 Read Prophet's analysis of whether AI will replace cybersecurity jobs →
AI in cybersecurity: what it means for security team roles?
Explore further
02/08/2026 12:46 pm
AI will reshape security work, but it does not remove the governance burden. The article correctly frames AI as a force multiplier rather than a direct replacement for security teams. In practice, automation shifts where judgement sits, but it does not eliminate the need for ownership, escalation, or evidence review. For IAM and SecOps leaders, the question is not whether AI works, but which decisions must stay under human accountability.
A question worth separating out:
Q: How should security teams govern AI-enabled workflows that can act on their own?
A: Treat them as identity-governed execution paths, not just software features. Assign a named owner, define least-privilege access, log every tool call, and require revocation paths for credentials and tokens. If the workflow can touch production systems or sensitive data, its permissions must be reviewed with the same discipline used for privileged machine identities.
👉 Read our full editorial: AI in cybersecurity will augment jobs before it replaces them
